oui.sncf
Issued by Amazon
About this certificate
This digital certificate with serial number 04:5f:d1:26:83:b6:8b:86:37:2d:be:4f:d5:49:e0:83 was issued on by Amazon.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=oui.sncf
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:5f:d1:26:83:b6:8b:86:37:2d:be:4f:d5:49:e0:83Serial Number (int): 5814422259741030528035993489221738627
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: c4:27:9b:47:7e:89:51:a4:bc:d6:48:39:96:b7:09:4b:ed:e6:83:3d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 6a:f6:e6:a4:b4:78:a8:16:bb:f9:61:59:c4:e9:5c:5b:86:dc:3e:f7
Fingerprint (sha256): 18:fb:74:58:a9:7b:d7:65:04:22:b6:83:8e:1f:1a:2e:ee:87:f9:69:2a:3a:41:5e:3a:0f:36:13:ce:2f:a5:97
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate oui.sncf
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for oui.sncf
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
oui.sncf
sncf.de
infoligne.com
sncf.com
nic.sncf
mytraintravel.com
tgv.com
*.mytraintravel.com
sncf.fr
sncf.de
infoligne.com
sncf.com
nic.sncf
mytraintravel.com
tgv.com
*.mytraintravel.com
sncf.fr
Other certificates including the domain name oui.sncf
(limited to 100 certificates)
hiflow.oui.sncf
kwsjy9.oui.sncf
ch.jeu.oui.sncf
allianz-travel.oui.sncf
forms.oui.sncf
mesbagages.oui.sncf
globe-ext2-cnit-gw.oui.sncf
hiflow.oui.sncf
da.oui.sncf
fr.jeu.oui.sncf
kwsjy9.oui.sncf
r1ztni.oui.sncf
zum7cc.oui.sncf
ch.hotel.oui.sncf
sstats.oui.sncf
it.hotel.oui.sncf
forms.oui.sncf
v.oui.sncf
v.oui.sncf
eu.jeu.oui.sncf
kwsjy9.oui.sncf
ch.jeu.oui.sncf
globe-ext2-cnit-gw.oui.sncf
mirror.avis.co.uk
sstats.oui.sncf
autotrain.oui.sncf
mirror.avis.co.uk
hotel.oui.sncf
lu.hotel.oui.sncf
autotrain.oui.sncf
*.fret.sncf.com
forms.oui.sncf
zum7cc.oui.sncf
partenariat.oui.sncf
inv3te.oui.sncf
presse.ouitalk.oui.sncf
*.oui.sncf
v.oui.sncf
abonnement.voyages-sncf.com
ao.oui.sncf
oui.sncf
v.oui.sncf
forms.oui.sncf
eu.jeu.oui.sncf
mirror.avis.co.uk
agence.voyages-sncf.com
zum7cc.oui.sncf
bagages.oui.sncf
es.jeu.oui.sncf
v.oui.sncf
be.hotel.oui.sncf
jobs.oui.sncf
nl.hotel.oui.sncf
tgvpop.oui.sncf
it.hotel.oui.sncf
ao.oui.sncf
mesbagages.oui.sncf
partenariat.oui.sncf
presse.ouitalk.oui.sncf
hiflow.oui.sncf
es.jeu.oui.sncf
ouitalk.oui.sncf
zum7cc.oui.sncf
autotrain.oui.sncf
secure.analytics.voyages-sncf.com
inv3te.oui.sncf
fl5dpe.oui.sncf
monchauffeur.oui.sncf
presse.ouitalk.oui.sncf
oui.sncf
oui.sncf
kwsjy9.oui.sncf
partenariat.oui.sncf
partenariat.oui.sncf
*.avis.fr
fl5dpe.oui.sncf
restaurationabord.oui.sncf
presse.ouitalk.oui.sncf
ch.jeu.oui.sncf
ch.jeu.oui.sncf
bagages.oui.sncf
kwsjy9.oui.sncf
presse.vous.sncf-connect.com
secure.analytics.voyages-sncf.com
r1ztni.oui.sncf
interrail.oui.sncf
lebartgv.oui.sncf
mesbagages.oui.sncf
v.oui.sncf
hiflow.oui.sncf
ch.jeu.oui.sncf
hiflow.oui.sncf
eu.jeu.oui.sncf
oui.sncf
*.fret.sncf.com
globe-cnit-gw.oui.sncf
presse.ouitalk.oui.sncf
mta.evtech.oui.sncf
oui.sncf
it.hotel.oui.sncf
kwsjy9.oui.sncf
ch.jeu.oui.sncf
allianz-travel.oui.sncf
forms.oui.sncf
mesbagages.oui.sncf
globe-ext2-cnit-gw.oui.sncf
hiflow.oui.sncf
da.oui.sncf
fr.jeu.oui.sncf
kwsjy9.oui.sncf
r1ztni.oui.sncf
zum7cc.oui.sncf
ch.hotel.oui.sncf
sstats.oui.sncf
it.hotel.oui.sncf
forms.oui.sncf
v.oui.sncf
v.oui.sncf
eu.jeu.oui.sncf
kwsjy9.oui.sncf
ch.jeu.oui.sncf
globe-ext2-cnit-gw.oui.sncf
mirror.avis.co.uk
sstats.oui.sncf
autotrain.oui.sncf
mirror.avis.co.uk
hotel.oui.sncf
lu.hotel.oui.sncf
autotrain.oui.sncf
*.fret.sncf.com
forms.oui.sncf
zum7cc.oui.sncf
partenariat.oui.sncf
inv3te.oui.sncf
presse.ouitalk.oui.sncf
*.oui.sncf
v.oui.sncf
abonnement.voyages-sncf.com
ao.oui.sncf
oui.sncf
v.oui.sncf
forms.oui.sncf
eu.jeu.oui.sncf
mirror.avis.co.uk
agence.voyages-sncf.com
zum7cc.oui.sncf
bagages.oui.sncf
es.jeu.oui.sncf
v.oui.sncf
be.hotel.oui.sncf
jobs.oui.sncf
nl.hotel.oui.sncf
tgvpop.oui.sncf
it.hotel.oui.sncf
ao.oui.sncf
mesbagages.oui.sncf
partenariat.oui.sncf
presse.ouitalk.oui.sncf
hiflow.oui.sncf
es.jeu.oui.sncf
ouitalk.oui.sncf
zum7cc.oui.sncf
autotrain.oui.sncf
secure.analytics.voyages-sncf.com
inv3te.oui.sncf
fl5dpe.oui.sncf
monchauffeur.oui.sncf
presse.ouitalk.oui.sncf
oui.sncf
oui.sncf
kwsjy9.oui.sncf
partenariat.oui.sncf
partenariat.oui.sncf
*.avis.fr
fl5dpe.oui.sncf
restaurationabord.oui.sncf
presse.ouitalk.oui.sncf
ch.jeu.oui.sncf
ch.jeu.oui.sncf
bagages.oui.sncf
kwsjy9.oui.sncf
presse.vous.sncf-connect.com
secure.analytics.voyages-sncf.com
r1ztni.oui.sncf
interrail.oui.sncf
lebartgv.oui.sncf
mesbagages.oui.sncf
v.oui.sncf
hiflow.oui.sncf
ch.jeu.oui.sncf
hiflow.oui.sncf
eu.jeu.oui.sncf
oui.sncf
*.fret.sncf.com
globe-cnit-gw.oui.sncf
presse.ouitalk.oui.sncf
mta.evtech.oui.sncf
oui.sncf
it.hotel.oui.sncf
Certificate
The complete raw certificate details for oui.sncf in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIQBF/RJoO2i4Y3Lb5P1UnggzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTEyMTcwMDAwMDBaFw0yMzAxMTUy MzU5NTlaMBMxETAPBgNVBAMTCG91aS5zbmNmMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA382dAVWSGQr0HYs3AfjH4SbRdiEa0xlf5l/w3db5VSRH4FRy Xxb55rOowa8XWY9SUBDxiYlLBlKclvGxJiqrkNATfdg8XtvIZw1dI6M00xWCcrBB BpYciTyC8N1TKVaFdelx+7r1h0P7rga9aBLqyeyzDSQFJniAh9sywSPYE2LQlyM6 8L0+0dcPVoi6CHx2IjsuSaBuyfPhG9sF8jJES2Rr5YzLWB2f+5YpZxA9TvCZxxBf L2TG3EHRpj3KYrgVACjTikZdYvNSNzx9Ua6ueUI1tmB7eSdxRMrm9PTLs9Fg4tvO jxme8kcn44KINpsnBJvB+ofCMNBeA9PvOTcRAwIDAQABo4IDSzCCA0cwHwYDVR0j BBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFMQnm0d+iVGkvNZI OZa3CUvt5oM9MHkGA1UdEQRyMHCCCG91aS5zbmNmggdzbmNmLmRlgg1pbmZvbGln bmUuY29tgghzbmNmLmNvbYIIbmljLnNuY2aCEW15dHJhaW50cmF2ZWwuY29tggd0 Z3YuY29tghMqLm15dHJhaW50cmF2ZWwuY29tggdzbmNmLmZyMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0fBDYwNDAy oDCgLoYsaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWItMS5j cmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF BzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH MAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAM BgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwCt9776fP8Q yIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAX3I9tUXAAAEAwBIMEYCIQDe2TJt hYMNwZzniFExBhOPsmP5xQvupmP5mR6GYqQh+wIhAIHxLyBjNB9r3drpzs1Y2t7m E8nfc6eSpz/tRaUx6t2lAHYANc8ZG7+xbFe/D61MbULLu7YnICZR6j/hKu+oA8M7 1kwAAAF9yPbU8wAABAMARzBFAiEAuTA9BslCH+vBTsi/gpAkv5oVSfIZ4U9hy9jN R4VgZzACICcBZ1XFMp9K3/hT9PT171wKQTnC8d473rynNxHUMyEhAHcAs3N3B+GE UPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAF9yPbVDgAABAMASDBGAiEAzy9p PzK/RVO0i2WvMuu6yRMm/Pq24hXEe9W4gt9uleACIQC+pD5/J2L9ja8zdNVT22bQ gDYFcTUp30C1csaSvdCldTANBgkqhkiG9w0BAQsFAAOCAQEAGO4NdkkSWYeQF2aO Uu2ouJawYFS0ieLhcz77ck+jAKSaD6y3F6zqEkPT1wtsjgVBVOOETGkD41OEXT4J VnhBTuPs47K/oeSrdm/2wcOVJKHjdNE9B5JAKK1HQvvapaTkFE2FlA4CwGOY/QTi rbjrL+osoJQQWghxPZg6jF2EvY4rXs9V/LnEqhzKdnZzNR06lekezwhcCfdkbSR1 7pXgznmT1EsrWFdTJ6G5YEcMqoSZssjdH4cuj/41IV23VXC+ZtzGvBWxqZYsUUwP kCKjWImv2UGLx4q7dru2OB0VSKxttAB4U5ZmG+AUIgmK7e1sFEKTX9oQ/VoR5zOo Rss3AA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA382dAVWSGQr0HYs3AfjH 4SbRdiEa0xlf5l/w3db5VSRH4FRyXxb55rOowa8XWY9SUBDxiYlLBlKclvGxJiqr kNATfdg8XtvIZw1dI6M00xWCcrBBBpYciTyC8N1TKVaFdelx+7r1h0P7rga9aBLq yeyzDSQFJniAh9sywSPYE2LQlyM68L0+0dcPVoi6CHx2IjsuSaBuyfPhG9sF8jJE S2Rr5YzLWB2f+5YpZxA9TvCZxxBfL2TG3EHRpj3KYrgVACjTikZdYvNSNzx9Ua6u eUI1tmB7eSdxRMrm9PTLs9Fg4tvOjxme8kcn44KINpsnBJvB+ofCMNBeA9PvOTcR AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5814422259741030528035993489221738627 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oui.sncf' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28252533705374902341645154712276475851102373078864732466180321869449331386571940108462251424502676040249496758423060586846916914188813133205895023092077584954650678678930251241647867064078721519057966624774917589681890024480258621109973753348875333901153587651472921681467150384647825034612998379969330524685343387100804883337527902502753436144006678516850638831766018224737204927598562999723892795946037288476269574234660141830492597830537403127503427850350599042461713058755454001605571327207997365700404803925386067387244300073779274782901420056089912598950646395754628519852442357021842750548166021249806531760387 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c4279b477e8951a4bcd6483996b7094bede6833d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oui.sncf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sncf.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infoligne.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sncf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.sncf' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytraintravel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytraintravel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sncf.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017dc8f6d5170000040300483046022100ded9326d85830dc19ce788513106138fb263f9c50beea663f9991e8662a421fb02210081f12f2063341f6bdddae9cecd58dadee613c9df73a792a73fed45a531eadda500760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017dc8f6d4f30000040300473045022100b9303d06c9421febc14ec8bf829024bf9a1549f219e14f61cbd8cd4785606730022027016755c5329f4adff853f4f4f5ef5c0a4139c2f1de3bdebca73711d4332121007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017dc8f6d50e0000040300483046022100cf2f693f32bf4553b48b65af32ebbac91326fcfab6e215c47bd5b882df6e95e0022100bea43e7f2762fd8daf3374d553db66d0803605713529df40b572c692bdd0a575 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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